The Endpoint Security server provides two message bus topics that the Process Tracker module will post activity to. One streams the process execution events that are posted by the endpoints, the other streams the alerts generated by the module.
Access to the message bus is via the Endpoint Security server REST API. API details relevant to the Process Tracker are covered in this guide. For more information about how to interact with the API, refer to Endpoint Security REST API Guide .
Note
Old messages roll off the message bus as new ones are created. Extract any messages you want to save.